Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146070.roa
File: AS146070.roa (raw, json)
Hash identifier: Z36PC5N5IL3egcDXG5YpdO8n6ZNnnoDfpPGxrj8O+kA=
Subject key identifier: EF:83:A3:2F:F1:E9:BC:B9:FF:BB:CE:3B:38:9E:40:51:46:DD:F2:25
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 446B9B000DD532F28DAD3D1A74FEBBF6ACB5CCDF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146070.roa
Signing time: Fri 22 May 2026 07:41:16 +0000
ROA not before: Fri 22 May 2026 07:36:16 +0000
ROA not after: Fri 21 May 2027 07:41:16 +0000
asID: 146070
IP address blocks: 240a:ad5c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:6b:9b:00:0d:d5:32:f2:8d:ad:3d:1a:74:fe:bb:f6:ac:b5:cc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:16 2026 GMT
Not After : May 21 07:41:16 2027 GMT
Subject: CN=EF83A32FF1E9BCB9FFBBCE3B389E405146DDF225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:58:23:37:05:a6:50:a3:8d:6a:7c:05:aa:f7:
ab:b0:2c:4a:ac:54:a1:c5:86:7c:19:7b:43:0d:44:
98:cf:c2:54:d9:a3:c2:81:ef:46:06:95:2e:bf:f9:
2c:6f:b3:24:2e:ff:30:e1:3f:fd:3f:73:7c:99:af:
8b:4b:f2:fc:a8:7d:7e:fa:f1:e6:06:c7:9a:87:e8:
db:7f:d3:17:e2:b4:ea:e4:07:b9:d2:7a:b2:5b:a6:
e0:ee:36:94:84:71:24:9a:93:24:49:1d:ab:d4:ec:
ed:1f:b8:d1:e2:f4:77:8a:b6:08:41:9a:9f:dd:e7:
ce:d8:26:fd:c9:b1:7f:d7:7f:f5:2b:e3:71:cd:a7:
33:ef:5b:bb:95:7d:a2:54:1d:d2:94:df:12:d1:0a:
ab:6e:57:7e:89:f5:13:93:a5:86:e2:36:2a:92:5b:
41:79:ae:88:aa:0c:15:86:bc:6f:69:d5:11:ba:e0:
35:ff:2b:59:5e:3a:10:45:24:b3:ad:14:f9:00:c0:
93:f1:ab:cd:db:23:65:c4:4a:d6:2d:d7:00:c6:05:
25:9e:07:12:86:af:2d:fc:73:7a:c4:fb:56:f3:64:
72:f7:67:9d:0f:ba:b6:e1:22:e5:7d:a2:79:d8:b0:
bc:9d:a4:89:78:f9:2e:50:ed:09:b7:7d:e5:2e:ef:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:83:A3:2F:F1:E9:BC:B9:FF:BB:CE:3B:38:9E:40:51:46:DD:F2:25
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146070.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad5c::/32
Signature Algorithm: sha256WithRSAEncryption
78:ec:69:d4:f9:14:bd:6f:b6:50:97:f6:af:3c:b9:e4:8f:a7:
c2:7b:95:9b:69:88:c5:1c:f0:94:a7:19:5e:2c:70:e1:b2:cf:
50:8c:62:f1:3e:58:71:97:a5:b6:e4:b6:e0:c1:b4:e0:29:36:
be:0a:d4:75:b9:5a:af:00:1a:a7:bb:f7:ef:88:6d:97:e6:d2:
d0:48:2d:da:a4:57:53:8e:ef:a3:49:10:fa:25:a7:e0:14:ed:
84:d0:0e:2e:cd:1c:c4:ba:d3:d4:db:d6:5b:62:49:98:cc:ec:
f0:a0:e9:86:74:da:4d:b7:1f:ac:59:ed:47:fd:66:a6:49:15:
e8:58:86:86:0a:d6:ec:b1:1e:2e:17:73:eb:80:e2:41:25:28:
93:4d:53:fc:52:3b:7d:94:c3:4a:cb:b1:e5:2b:fe:10:08:00:
f4:19:e8:e8:6c:e3:41:48:85:c3:be:0d:6d:1e:72:12:95:a3:
d5:bf:10:11:26:36:af:41:47:71:69:75:e2:0e:ec:a3:aa:29:
ae:f9:b7:b2:b8:0c:68:70:2a:0d:32:f2:d0:eb:5e:c3:6b:65:
10:72:f6:e9:67:6f:d4:66:81:f5:ce:4d:f4:29:58:cf:f7:fb:
bf:c4:a4:a5:cd:2e:cb:e2:18:71:f4:d7:9b:27:b5:87:70:a1:
d2:a0:5d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:45 2026 by rpki-client